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A data earner having a semiconductor chip (5) with at least one memory con- 
taining an operating program which is able to execute at least one operation 
(h), the execution of the operation (h) requiring input data (x) and the execution 
of the operation (h) generating output data (y), characterized in that 
the operation (h) is disguised before its execution, 

- the disguised operation (h^,) is executed with disguised input data 
(x <8> Ri), and 

- the disguising of the operation (h) and the input data (;c) is coordinated 
such that the execution of the disguised operation (hj,0 with disguised in- 
put data (X ® R,) yields output data (y) identical with the output data (y) 
determined upon execution of the undisguised operation (h) with undis- 
guised input data (jc). 

A data earner according to claim 1, characterized in that at least one random 
number (R^) enters into the determination of the disguised operation (h^,) and 
the disguised input data (jc <8> 



A data carrier accorW to either of the above claims, characterized in that the 

determination of the disced operation (h^,) and the disguised input data 

(x^Ri) is effected with th^id of EXOR operations. 

A data carrier according to anyW the above claims, characterized in that the 
disguised operation (h^,) is perm ai^tly stored in the data carrier in advance. 
A data carrier according to claim 4, characterized in that at least two disguised 
operations (A^i, A^,.) are permanently stored in the data carrier in advance and 
one of the stored disguised operations (h^^, h^,,) is selected randomly when a 
disguised operation is to be executed. 



6. 



A data carrier accordin>t9^y of claims 1 to 3, characterized in that the dis- 
guised operation (h^O is recilbnlated before its execution and the at least one 
random number (7?,) is redetennin^or said calculation. 
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7. A data carrier accoJ^to any of the above claims, characterized in that the 
operation (h) is realizedWable stored in the data carrier which establishes 
an association between th. a... and the output data (v^ 



8. A data carrier according to claim 7, characterized in that the disguising of the 
input data (x) contained in the table is effected by combination with the at least 
one random number (/?,). 

9. A data carrier having a semiconductor chip (5) with at least one memory con- 
taining an operating program which is able to execute at least one operation 
(h), the execution of the operation (h) requiring input data (;c) and the execution 
of the operation (h) generating output data O), characterized in that 

the operation (h) is disguised before its execution, 
I - the disguised operation (A^O is executed with disguised input data 

- the disguising of the operation (h) and the input data (x) is coordinated 
such that the execution of the disguised operation (h^,,^) with disguised 
input data (x 0 R,) yields output data (y ® R,) which are disguised rela- 
tive to the output data (y) determined upon execution of the undisguised 
operation (h) with undisguised input data (x), and 

- the undisguised output data (y) can be determined from the disguised out- 
put data (V <8) R,) with the aid of data (R2) used for disguising the opera- 
tion (h). 

10. A data carrier according to claim 9, characterized in that at least one random 
number (R,) enters into the determination of the disguised input data (x ® R,) 
and at least two random numbers (/?,, R2) enter into die determination of the 
disguised^ operations (A/ei/a). 



CUtfe^'^ ^ camV^ording to either of claims 9 and 10, characterized in that ±e 

determination of^h^guised operation (/z;,,^) and the disguised input data 
(x ® Ri) is effected withvthe aid of EXOR operations. 
12. A data carrier according to^JWclaims 9 to 1 1, characterized in that the dis- 
guised operation (h^^,^) is permai^ stored in the data carrier in advance. 



13. 
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14. 



15. 



16. 



17. 



A data carrier according to claim 12, characterized in that at least two dis- 
guised operations (/;,.^, A^,^,) are permanently stored in the data earner in 
advance and one of the stored disguised operations (h,,^, /,,,^.) is selected 
randomly when a disguised operation is to be executed. 

A data carrier according to claim 13, characterized in that the random numbers 
(Ru R2) for detennining the first disguised operation (h,,^) are inverse to the 
random numbers (R,', R,') for detennining the second disguised operation 
(A^ivs ) with respect to the combination used for determining the disguised 
operations (hmjiz, hnyj^). 

A data c^isieraccording to any of claims 9 to 1 1, characterized in thaT±^ 
guised operati^iK^) is recalculated before its execution and the random 
numbers (/?,, ^2) arerfed^rmined for said calculation. 
A data carrier according t^^Wclaims 9 to 15, characterized in that the op- 
eration (A) is realized by a table^fe^ the data carrier which establishes an 
association between the inpu t data (jc)^a^e output data (y). 



A data carrier according to claim 16, characterized in tii^A^^^^i^^^i^^Ftiir 
input data {x) contained in the table is effected by combination with the at least 
one random number and the disguising of the output data (y) contained in 
the table is effected by combination with the at least one further random num- 
ber {R2). 



S^hSy^^- A data carrier according>b^y of the above claims, characterized in that the 

^n with respect to the combination used for 



operation (h) is a nonlinear 
disguising the operation (h). 



